This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File:                     1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier:          XwOkztsFmUEoY+Kx1rcR/XKrm9fAgD5IAW2Dym+Nb1A=
Subject key identifier:   24:4B:29:9C:86:48:FA:F6:14:0F:B1:AE:03:01:C4:F0:BB:67:5E:E2
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer:       /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial:       019C4390AE8E11CBEEC6EFC512FBA1CB465E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number:          0659
Signing time:             Mon 09 Feb 2026 18:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:21 +0000
Files and hashes:         1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: L3JaUaRXPtvP0+TsAI2vZI/2aTjLp0xnL9HPfG7MUv8=)
                          2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:ae:8e:11:cb:ee:c6:ef:c5:12:fb:a1:cb:46:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
        Validity
            Not Before: Feb  9 18:01:21 2026 GMT
            Not After : Feb 10 18:01:21 2026 GMT
        Subject: CN=244b299c8648faf6140fb1ae0301c4f0bb675ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:3a:df:0d:b0:ae:6a:8a:97:99:db:80:ae:
                    7e:a8:ca:28:6f:7b:1c:8e:79:9f:8e:a4:6d:59:64:
                    ce:15:96:1c:72:2b:22:a5:80:95:6c:08:a4:66:1b:
                    17:1a:5a:a8:57:40:10:11:a2:f0:63:fc:fe:6f:23:
                    54:e6:43:81:06:13:9e:7f:cb:fd:b1:66:47:4a:08:
                    13:d4:37:62:e6:aa:d0:96:7a:ef:2b:01:f0:c6:f8:
                    fb:4b:be:75:99:47:6f:f8:24:70:83:36:0e:dc:ea:
                    28:63:69:1a:74:38:36:6f:a6:db:cf:c0:8e:a1:b5:
                    0b:4f:6b:e8:4c:e5:1d:a6:d2:15:b7:8b:e1:a8:3f:
                    d2:9e:8b:31:8e:64:c2:dd:30:2e:4e:d4:8d:54:90:
                    10:77:bc:28:8f:21:3c:58:0d:d0:4c:1e:2d:86:59:
                    0f:4a:94:70:f7:a4:d9:dd:2f:d3:86:dd:5d:e5:4e:
                    5f:04:66:7b:ba:07:fb:db:5d:24:5d:95:39:79:c9:
                    4c:95:82:6a:05:1d:a6:ed:72:0d:ff:9b:57:57:26:
                    95:51:12:1a:b3:bc:eb:21:a8:20:a0:db:88:72:55:
                    ff:10:b6:86:7c:c7:99:8a:71:ed:ab:d7:e5:98:49:
                    d0:09:ff:3b:d5:6b:0d:ba:4c:ad:e7:e3:fa:90:6c:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4B:29:9C:86:48:FA:F6:14:0F:B1:AE:03:01:C4:F0:BB:67:5E:E2
            X509v3 Authority Key Identifier:
                keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d0:97:1a:fd:d4:da:66:f9:80:39:b5:55:09:24:f3:0c:52:
         a7:3b:99:2a:17:bc:ae:e0:40:35:89:1a:36:b9:e1:db:26:cf:
         ca:fd:98:77:5a:80:1f:dc:4e:35:8f:da:3b:ff:09:24:b7:bc:
         cf:70:c9:e3:79:f0:2b:c8:ad:d9:a2:8e:b8:45:2b:fd:88:3c:
         46:98:d5:0c:a1:80:ea:8b:34:1e:13:2c:6b:f5:87:db:0c:a7:
         10:b1:f6:1f:96:08:2f:c0:a6:14:d2:5d:df:3f:45:67:0b:97:
         fb:83:9d:86:39:b1:dd:1b:a2:b0:a7:f1:e0:41:ae:60:1d:a0:
         4e:95:7e:c4:85:ce:41:30:f9:38:87:b9:26:70:5d:fe:fd:50:
         e3:08:cf:f5:d9:15:db:72:a4:49:31:54:99:f4:2d:1b:86:53:
         0c:5c:f7:08:e7:60:37:25:0b:ca:42:05:c5:d4:45:40:15:b3:
         f8:2f:ad:eb:1e:aa:ef:cb:b2:90:5a:d2:c5:c4:fa:1e:e6:ba:
         15:ac:3c:35:2b:e3:cc:f4:24:e0:70:4e:d4:e4:a3:8f:86:6d:
         f4:8d:5c:43:74:6d:73:7f:3a:1a:a7:07:8a:a2:e2:ad:40:b6:
         43:8a:e8:8e:06:94:91:ae:bb:53:38:00:9e:61:21:58:3e:af:
         3d:3b:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:56 2026 by rpki-client